CVE-2026-97229

Vendor

GitLab

Product

Community Edition and Enterprise Edition

CVSS

10.0

EPSS

0.27 (p98)

CISA KEV

added 29 Oct 2026, due 1 Nov 2026 (0d)

Weakness

CWE-190

Exposure class

Developer platform, Edge / VPN / firewall, Network management

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 86
   KEV NVD 19d ago

   GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound Vulnerability

   GitLab Community Edition and Enterprise Edition contain a integer overflow or wraparound vulnerability that could allow an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular…

   KEV · due 1 Nov 2026 CVSS 10.0 EPSS 0.27 Fix available CVE-2026-97229 GitLab
2. 75
   Research Rapid7 18d ago

   CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

   Overview On October 12, 2026, GitLab published a critical patch release for CVE-2026-97229 , an integer overflow or wraparound ( CWE-190 ) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and…

   Exploited CVSS 10.0 EPSS 0.27 Fix available CVE-2026-97229 GitLab
3. 77
   CISA alert CISA 2d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or Wraparound…

   Exploited EPSS 0.27 CVE-2026-97229CVE-2026-76418 Cisco GitLab
4. 45
   Research Rapid7 15d ago

   Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)

   Overview On October 12, 2026, GitLab released 19.4.2 , 19.3.5 , and 19.2.8 to fix CVE-2026-97229 , an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar . GitLab…

   CVSS 10.0 EPSS 0.27 CVE-2026-97229 GitLab Rapid7
5. 42
   GitLab release GitLab 20d ago

   GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8

   On October 12, 2026, we released versions 19.4.2, 19.3.5, 19.2.8 for GitLab Community Edition (CE) and Enterprise Edition (EE). 19.3.4 had a bug that affected merge request pages when the Ona integration was enabled. This is…

   EPSS 0.27 Fix available CVE-2026-97229CVE-2026-92883CVE-2026-16301+21 more GitLab
6. 39
   CCCS advisory CCCS 2d ago

   GitLab security advisory (AV26-1028)

   EPSS 0.27 CVE-2026-97229 GitLab
7. 31
   News SecurityWeek 46h ago

   Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

   Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek .

   EPSS 0.27 CVE-2026-97229 GitLab
8. 22
   Research Check Point Research 12d ago

   19th October – Threat Intelligence Report

   For the latest discoveries in cyber research for the week of 19th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES CenterPoint Energy, a US utility company serving Texas and several other…

   EPSS 0.27 CVE-2026-35029CVE-2026-59823CVE-2026-96951+4 more